Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft
File: wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft (raw, json)
Hash identifier: xXG7GeUEL0FIQA0VKNN3zoeFR2e+jv8jWF7p7FTwxw0=
Subject key identifier: B3:D4:52:8A:7B:A3:F8:7F:69:C2:80:2F:EE:76:9E:89:F9:10:6E:D7
Authority key identifier: C2:DD:47:52:D7:9D:43:88:C1:F6:B2:85:60:3D:40:B5:A4:B6:95:36
Certificate issuer: /CN=c2dd4752d79d4388c1f6b285603d40b5a4b69536
Certificate serial: 019D277209D9136A43E37E2F015173CB9D86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wt1HUtedQ4jB9rKFYD1AtaS2lTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft
Manifest number: 0B8C
Signing time: Thu 26 Mar 2026 00:01:18 +0000
Manifest this update: Thu 26 Mar 2026 00:01:18 +0000
Manifest next update: Fri 27 Mar 2026 00:01:18 +0000
Files and hashes: 1: aPQErA1H1tvLKOM_S7Xvs0Zudg0.roa (hash: YgDV6lSWXJsx/Tra+FgUOmYQqBP8G4F9S/WJqO8pRPM=)
2: wt1HUtedQ4jB9rKFYD1AtaS2lTY.crl (hash: loQERiyj3OKBOaqCvfWzYTbn3V7T1J9Pa63bsQ924lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wt1HUtedQ4jB9rKFYD1AtaS2lTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:09:d9:13:6a:43:e3:7e:2f:01:51:73:cb:9d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2dd4752d79d4388c1f6b285603d40b5a4b69536
Validity
Not Before: Mar 26 00:01:18 2026 GMT
Not After : Mar 27 00:01:18 2026 GMT
Subject: CN=b3d4528a7ba3f87f69c2802fee769e89f9106ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:20:1d:f5:2e:c2:bb:84:4f:65:9b:15:e2:72:
6c:0d:70:dd:3c:cd:43:ba:07:c6:d7:d3:dd:57:50:
4d:50:7c:aa:30:c3:a0:6a:26:13:39:ae:ba:05:e1:
94:b1:bf:08:1d:d2:71:02:54:01:58:25:d7:77:ba:
d9:9f:77:87:17:d5:7b:52:8e:f5:08:6c:36:96:4c:
6e:84:e6:5a:78:90:c1:e6:d0:ab:db:a8:30:5a:ed:
3c:62:34:b8:85:21:e7:10:ad:ae:2d:9b:94:7d:bb:
6a:38:33:5c:c6:11:c0:7d:a9:ec:68:7a:2d:14:53:
be:d3:47:29:aa:9b:9a:0f:3f:6f:fd:86:79:5c:f3:
f0:bd:18:41:72:88:c6:cb:e6:60:9b:2f:62:84:cb:
b9:08:39:5d:d8:b3:11:5e:85:c8:ba:72:2b:aa:06:
e5:a5:42:af:5c:ec:3d:95:25:e8:bd:37:29:9a:5a:
91:54:5c:4c:0e:2f:d1:74:d5:7b:8d:1f:c8:a0:53:
62:c6:f9:04:b3:9e:7d:b6:f1:66:45:e7:d7:f2:c6:
c4:0c:1a:5e:c6:0a:e3:9c:7e:e3:39:c8:a3:3b:5a:
02:9e:f0:19:03:8b:5f:b6:67:04:ea:56:b5:dc:44:
6c:70:d0:57:71:ed:d0:5f:07:1c:68:32:cd:e2:29:
f2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D4:52:8A:7B:A3:F8:7F:69:C2:80:2F:EE:76:9E:89:F9:10:6E:D7
X509v3 Authority Key Identifier:
keyid:C2:DD:47:52:D7:9D:43:88:C1:F6:B2:85:60:3D:40:B5:A4:B6:95:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wt1HUtedQ4jB9rKFYD1AtaS2lTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:7d:69:f3:d0:c7:33:03:9a:cb:eb:3f:84:7b:8f:cd:77:6d:
49:a1:ca:7f:cd:35:e7:72:d8:1d:c2:22:cd:bc:bf:62:ad:d5:
9a:09:bf:17:32:39:c7:ab:70:f8:09:1e:51:0b:5a:df:e9:d5:
97:e3:2f:3e:d5:3b:07:87:f7:f4:a5:ce:13:3a:ec:90:be:0c:
ac:21:63:85:0a:48:bb:f6:c2:5c:ed:61:7c:05:28:14:42:c8:
3a:ba:15:01:cc:c6:67:95:05:d6:18:3f:0b:c9:46:9c:43:e4:
55:e6:6b:d7:8b:be:ad:48:9c:18:10:82:5e:17:3e:a7:d3:8f:
9e:99:63:6c:dc:60:8d:d5:f4:04:d6:1a:0b:52:81:3b:45:8d:
5f:0c:88:17:10:8a:e4:80:4e:6a:7f:24:7b:65:9e:87:fe:8e:
5f:db:cb:68:38:60:e1:cb:ec:1c:a0:f2:c7:e7:a4:d1:95:c6:
a0:93:66:8c:1d:00:7e:de:77:96:dd:e3:70:d3:37:eb:fd:04:
f6:04:e1:b9:d0:63:64:c2:d6:38:6d:fc:e3:89:44:c2:bf:2d:
df:07:83:ed:30:d1:1f:0a:e7:28:42:76:2c:2a:ef:47:99:ba:
7c:d4:5e:bc:29:c4:fb:5d:76:cf:6a:51:f0:9e:51:ec:71:91:
ec:d7:d3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:53:47 2026 by rpki-client